CVE-2015-6360
High
Description
The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Cisco Libsrtp
PublishedApr 21, 2016
First seenApr 21, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios_xe | 3.10s_3.10.0s, 3.10s_3.10.1s, 3.10s_3.10.1xbs, 3.10s_3.10.2s, 3.10s_3.10.2ts, 3.10s_3.10.4s, 3.10s_3.10.5s, 3.10s_3.10.6s, 3.10s_3.10.7s, 3.11s_3.11.0s, 3.11s_3.11.1s, 3.11s_3.11.2s, 3.11s_3.11.3s, 3.11s_3.11.4s, 3.13s_3.13.0s, 3.13s_3.13.1s, 3.13s_3.13.4s, 3.14s_3.14.0s, 3.15s_3.15.1s, 3.15s_3.15.2s | — |
| cisco webex_meeting_center | base | — |
| cisco dx_series_ip_phones_firmware | 9.3\(2\) | — |
| cisco ip_phone_7800_series_firmware | 10.3\(1\) | — |
| cisco ip_phone_8800_series_firmware | 10.3\(2\), 11.0\(1\) | — |
| cisco unified_ip_phone_6900_series_firmware | 9.3\(2\) | — |
| cisco unified_ip_phone_7900_series_firmware | 9.9\(9.99001.1\), 9.9_base | — |
| cisco unified_ip_phone_8900_series_firmware | 9.0\(1\)sr1, 9.0\(3\), 9.0\(4\), 9.1\(1\)sr1, 9.1\(2\), 9.2\(1\), 9.2\(2\), 9.2\(2\)sr1, 9.2\(3\), 9.2\(4\), 9.3\(1\), 9.3\(2\), 9.3\(2\)sr1, 9.3\(4\), 9.4\(1\), 9.4\(1\)sr1, 9.4\(2\) | — |
| cisco unified_wireless_ip_phone_7920_firmware | 1.0\(5\), 1.0\(6\), 1.0\(7\), 1.0\(8\), 1.0\(9\), 1.0_base, 2.0_base | — |
| cisco adaptive_security_appliance_software | 8.1.0.104, 8.2.0.45, 8.2.1, 8.2.1.11, 8.2.2, 8.2.2.9, 8.2.2.10, 8.2.2.12, 8.2.2.16, 8.2.2.17, 8.2.3, 8.2.4, 8.2.4.1, 8.2.4.4, 8.2.5, 8.2.5.13, 8.2.5.22, 8.2.5.26, 8.2.5.33, 8.2.5.40, 8.2.5.41, 8.2.5.46, 8.2.5.48, 8.2.5.50, 8.2.5.52, 8.2.5.55, 8.2.5.57, 8.3.1, 8.3.1.1, 8.3.1.4, 8.3.1.6, 8.3.2, 8.3.2.4, 8.3.2.13, 8.3.2.23, 8.3.2.25, 8.3.2.31, 8.3.2.33, 8.3.2.34, 8.3.2.37, 8.3.2.39, 8.3.2.40, 8.3.2.41, 8.3.2.44, 8.4.0, 8.4.1, 8.4.1.3, 8.4.1.11, 8.4.2, 8.4.2.1, 8.4.2.8, 8.4.3, 8.4.3.8, 8.4.3.9, 8.4.4, 8.4.4.1, 8.4.4.3, 8.4.4.5, 8.4.4.9, 8.4.5, 8.4.5.6, 8.4.6, 8.4.7, 8.4.7.3, 8.4.7.15, 8.4.7.22, 8.4.7.23, 8.4.7.26, 8.4.7.28, 8.4.7.29, 8.5.1, 8.5.1.1, 8.5.1.6, 8.5.1.7, 8.5.1.14, 8.5.1.17, 8.5.1.18, 8.5.1.19, 8.5.1.21, 8.5.1.24, 8.6.1, 8.6.1.1, 8.6.1.2, 8.6.1.5, 8.6.1.10, 8.6.1.12, 8.6.1.13, 8.6.1.14, 8.6.1.17, 8.7.1, 8.7.1.1, 8.7.1.3, 8.7.1.4, 8.7.1.7, 8.7.1.8, 8.7.1.11, 8.7.1.13, 8.7.1.16, 8.7.1.17, 9.0.1, 9.0.2, 9.0.2.10, 9.0.3, 9.0.3.6, 9.0.3.8, 9.0.4, 9.0.4.1, 9.0.4.5, 9.0.4.7, 9.0.4.17, 9.0.4.20, 9.0.4.24, 9.0.4.26, 9.0.4.29, 9.0.4.33, 9.0.4.35, 9.0.4.37, 9.1.1, 9.1.1.4, 9.1.2, 9.1.2.8, 9.1.3, 9.1.3.2, 9.1.4, 9.1.4.5, 9.1.5, 9.1.5.10, 9.1.5.12, 9.1.5.15, 9.1.5.21, 9.1.6, 9.1.6.1, 9.1.6.4, 9.1.6.6, 9.1.6.8, 9.1.6.10, 9.2\(0.0\), 9.2\(0.104\), 9.2\(3.1\), 9.2.1, 9.2.2, 9.2.2.4, 9.2.2.7, 9.2.2.8, 9.2.3, 9.2.3.3, 9.2.3.4, 9.2.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.